
Research
/Security News
77 Firefox Extensions Linked to Crypto Wallet and Credential Theft
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.
@ttctl/core
Advanced tools
Core library for the TTCtl toolkit — Toptal Talent platform API client, auth, transport, and service namespaces.
Unofficial. TTCtl is NOT affiliated with, endorsed by, or supported by Toptal LLC. See the project README for the full use policy and disclaimer.
Library consumers who want programmatic access to the surfaces the ttctl CLI exposes — including the typed GraphQL clients, the bearer-token auth lifecycle, the Chrome-TLS-impersonating transport for Cloudflare-protected endpoints, and the YAML config loader.
End users should install the ttctl umbrella package instead — it ships the CLI binary and the MCP server.
npm install @ttctl/core
Requires Node.js ≥ 24, ESM only.
resolveConfig, loadConfigFile, ConfigError, ConfigLoadSchema, ConfigWriteSchema, discoverConfigPathwriteNewConfig (bootstrap), persistAuthToken / clearAuthToken (atomic single-file token lifecycle), AuthTokenPersistError, acquireConfigLocksignIn, signOut, getAuthStatus, resolveCredentials, SignInError, AuthRevokedError, TtctlErrorstockTransport (mobile gateway), impersonatedTransport / impersonatedMultipartTransport (Chrome-TLS impersonation for Cloudflare-protected surfaces), callSurface, Cf403Error, Cf403PersistentError, RedirectError (no-follow redirect policy, issue #268), SchedulerBearerExpired, IMPERSONATE_PROFILE, getRedirectLocation, buildDryRunPreview, buildGraphQLMultipartTransportError, readTransportConfig, resetTransportConfigCacheprofile, applications, contracts, engagements, availability, jobs, payments, timesheetresolveOnePasswordReference, OnePasswordErrorsetDiagnosticLogger / getDiagnosticLogger / resetDiagnosticLogger, logTransportRequest, logTransportResponseredactBody, redactHeaders, containsBearerToken, BEARER_PATTERN, BEARER_PATTERN_SOURCE, SECRET_BODY_FIELD_NAMES, SECRET_HEADER_NAMESparseDateInput, DateInputError, splitParagraphsThe full export list lives in src/index.ts.
import { resolveConfig, getAuthStatus, profile } from "@ttctl/core";
// Resolve config from --config arg / TTCTL_CONFIG_FILE env / ~/.ttctl.yaml
const { config } = resolveConfig();
const token = config.auth.token ?? "";
const status = await getAuthStatus(token);
if (status.status !== "valid") {
throw new Error(`Not signed in: ${status.status}`);
}
// Use a service sub-namespace — `profile` splits into `basic`, `skills`,
// `employment`, `education`, … (see `src/services/profile/index.ts`).
const me = await profile.basic.show(token);
console.log(me.viewer?.viewerRole.fullName);
AGPL-3.0-only. Importing @ttctl/core into your own code means the combined work is covered by AGPL-3.0; distribution triggers source-disclosure under AGPL § 13 if the combined work is offered as a network service. See the project README's License section for the maintainer's posture.
FAQs
Core library for Toptal Talent platform integration: API client, auth, services
The npm package @ttctl/core receives a total of 53 weekly downloads. As such, @ttctl/core popularity was classified as not popular.
We found that @ttctl/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.

Security News
NIST disclosed an unreleased AI tool called V-etalon and opened a broad inquiry into NVD modernization after years of automation plans produced no public enrichment system.

Security News
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.